user avatar
user avatar
user avatar
Ruggero
  • Member for 7 years, 11 months
  • Last seen this week
67 votes

What's the appeal of using ChaCha20 instead of AES?

52 votes

AES256-GCM - can someone explain how to use it securely (ruby)

51 votes

Why Curve25519 for encryption but Ed25519 for signatures?

40 votes
Accepted

SHA-256 hash of null input?

23 votes

Is secp256r1 more secure than secp256k1?

22 votes
Accepted

Why is there the option to use NIST P-256 in GPG?

17 votes

Assuming a 1024qb quantum computer, how long to brute force 1024bit RSA, 256bit AES and 512bit SHA512

16 votes
Accepted

Curve25519 vs "Million Dollar Curve"

12 votes

How sensitive to change are elliptic curve formulae In layman's terms?

12 votes
Accepted

Curve 25519 (X25519, Ed25519) Convert coordinates between Montgomery curve and twisted Edwards curve

10 votes
Accepted

EC curve selection

10 votes
Accepted

Is ChaCha20 safer than AES with respect to side-channel attacks?

10 votes
Accepted

Relationship between AES GCM and AES CTR

8 votes
Accepted

Why is elliptic curve parameter $a=-3$ somehow special

8 votes
Accepted

AES GCM vs other encryption modes in embedded environment for network traffic

8 votes
Accepted

Cryptographic hasing functions init-update-final

7 votes
Accepted

Finding scalar that creates a point with zero X-coordinate for popular elliptic curves

7 votes

Attacks on the RSA Cryptosystem

7 votes

Security level difference: supersingular vs non-singular elliptic curve

6 votes

Why must an elliptic curve group for ECC have prime order?

6 votes
Accepted

Is the prime P is fixed for an elliptic curve defined over a particular prime field F_p?

6 votes
Accepted

Verifying EdDSA signatures using xedDSA verify function.

5 votes

Does RSA have two trapdoors?

5 votes

If OAEP is introducing randomness to encryption how could be ciphertext decrypted?

5 votes
Accepted

Why is only one generator stated in literature for elliptic curve group P-256?

5 votes

Encrypt-then-MAC: Do I need to authenticate the IV?

5 votes

Is there any reason not to use EdDSA with Weierstrass curves?

5 votes
Accepted

Isn't the security of EC curve 25519 126 bits?

4 votes
Accepted

What happens if you multiply a point with its order on complete Edwards curves?

4 votes

How can I hash an input into an arbitrary domain point?